linux-fsdevel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Theodore Ts'o <tytso@mit.edu>
To: "Darrick J. Wong" <darrick.wong@oracle.com>
Cc: Aurelien Jarno <aurelien@aurel32.net>,
	Alexander Viro <viro@zeniv.linux.org.uk>,
	linux-fsdevel@vger.kernel.org,
	Robert Edmonds <edmonds@debian.org>,
	Rob Browning <rlb@defaultvalue.org>
Subject: Re: Argument type for FS_IOC_GETFLAGS/FS_IOC_SETFLAGS ioctls
Date: Tue, 26 Nov 2013 23:00:13 -0500	[thread overview]
Message-ID: <20131127040013.GA19941@thunk.org> (raw)
In-Reply-To: <20131127010141.GA10273@birch.djwong.org>

On Tue, Nov 26, 2013 at 05:01:41PM -0800, Darrick J. Wong wrote:
> > Most of the userland code seems to pass an int to this ioctl, but a few
> > others (e.g.: bup, libexplain) passes a long. While it doesn't make a
> > difference on little endian machines, it does make a difference on
> > 64-bit big endian machines.
> > 
> > Could you please tell me if I am wrong in my analysis or if there is a
> > actually real problem?
> 
> It also causes problems with FUSE, because the kernel fuse driver expects to be
> able to transfer a ulong to and from userspace, but chattr & friends only
> allocate an int on the stack, so stack mashing seems to happen.
> 
> I complained to tytso about it on linux-ext4 a while ago, he suggested
> special-casing fuse... I haven't gotten around to doing that.

This is a mistake that was made a long, LONG, LONG time ago.  And so
there are huge numbers of userspace programs which are using an int,
and we change it to be a long, it will break those userspace programs
for ALL platforms where sizeof(int) != sizeof(long).  This includes all
64-bit x86 systems, for which there are quite a few.  :-)

Yes, it's unfortunate that programs that programs that try to use a
long are breaking on 64-bit big endian machines, but (a) there are
much fewer of them, and (b) they are only breaking on big endian
machines, as opposed the much bigger class of userspace programs which
would break on the proposed change for ALL 64-bit platforms, including
x86-64.  And like it or not, there are a lot more linux machines
running x86-64, compared to those running linux on big-endian PowerPC.
(Of course, the little-endian ppc machines which IBM is now pushing
for Linux in data centers will be just fine.  :-P)

If people really cared, we could allocate a new ioctl codepoint, and
then teach the kernel to support the new ioctl number, and then
gradually change userspace to first try the new ioctl, and if that
failed go back to the old one.  The coversion progress would take 5-10
years (there are still sites running RHEL 3, and RHEL 4 after all),
and it wouldn't help existing userspace programs, that would still be
using the old code point.  Hence my recommendation that the path of
least resistence is to fix the kernel FUSE code, instead of trying to
change the world.

Regards,

					- Ted

P.S.  If we were going to create a new ioctl, what I'd suggest is that
the new ioctl explicitly use a 64-bit type, instead of using "long" or
"int", to avoid the compat ioctl hair to allow 64-bit kernels to
support 32-bit userspace programs.

  reply	other threads:[~2013-11-27  4:00 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-11-26 20:05 Argument type for FS_IOC_GETFLAGS/FS_IOC_SETFLAGS ioctls Aurelien Jarno
2013-11-27  1:01 ` Darrick J. Wong
2013-11-27  4:00   ` Theodore Ts'o [this message]
2013-11-27 10:03     ` Aurelien Jarno
2013-11-27 13:34       ` Theodore Ts'o
2013-11-27 18:14         ` Robert Edmonds
2013-11-27 23:14         ` Aurelien Jarno
2013-11-29  0:53     ` Andreas Dilger
2013-11-29  4:54       ` Theodore Ts'o
2013-11-29  5:27         ` Dave Chinner
2013-11-29 14:22           ` Theodore Ts'o
2013-11-29 16:32             ` Rob Browning
2013-12-01 22:20             ` Dave Chinner
2013-12-02  4:52               ` Theodore Ts'o
2013-12-02 22:30                 ` Dave Chinner
2013-11-29 21:55           ` Andreas Dilger
2013-12-19 18:20   ` Rob Browning
2013-12-19 23:30     ` Darrick J. Wong
2013-11-27 10:15 ` Christoph Hellwig
2014-06-30 22:51   ` Rob Browning

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20131127040013.GA19941@thunk.org \
    --to=tytso@mit.edu \
    --cc=aurelien@aurel32.net \
    --cc=darrick.wong@oracle.com \
    --cc=edmonds@debian.org \
    --cc=linux-fsdevel@vger.kernel.org \
    --cc=rlb@defaultvalue.org \
    --cc=viro@zeniv.linux.org.uk \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).